
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
File: AS45700.roa (raw, json)
Hash identifier: /1LWrRhqReIukWiX2P9+azoAV5YJhAiOPALAX0RMuXs=
Subject key identifier: 00:DB:A8:14:B8:30:3B:DE:14:3A:F0:B2:71:29:58:41:7B:E3:5A:1A
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 4DA050F17D4AA7EA3D5B6D40BC7629DD67E32152
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
Signing time: Thu 19 Feb 2026 03:00:02 +0000
ROA not before: Thu 19 Feb 2026 02:55:02 +0000
ROA not after: Thu 18 Feb 2027 03:00:02 +0000
asID: 45700
IP address blocks: 119.11.204.0/23 maxlen: 23
119.11.204.0/24 maxlen: 24
119.11.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a0:50:f1:7d:4a:a7:ea:3d:5b:6d:40:bc:76:29:dd:67:e3:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Feb 19 02:55:02 2026 GMT
Not After : Feb 18 03:00:02 2027 GMT
Subject: CN=00DBA814B8303BDE143AF0B2712958417BE35A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:f5:12:60:9f:db:4f:e6:88:49:f4:c6:34:
63:ab:eb:da:cc:c2:74:42:d0:bf:ea:61:11:db:8d:
94:79:4b:1f:f9:c4:eb:75:bc:c3:cd:11:be:7f:df:
64:87:ed:3c:b8:76:51:77:68:ed:19:90:4b:0a:72:
13:85:67:bf:2b:f2:a8:c8:ba:6c:62:89:d9:cb:ec:
87:ee:b1:b4:f4:b4:6a:30:63:1f:39:1a:37:b0:d5:
3b:21:92:4e:e8:af:db:3e:fd:cc:e2:3f:42:ed:92:
80:2c:54:fa:a5:43:ce:2f:e6:01:73:38:f5:15:15:
12:23:45:a0:59:bc:f3:42:8c:60:1d:70:f4:ca:88:
ee:65:e7:28:c8:31:64:69:d8:36:71:4f:c1:6d:b3:
89:04:38:d3:53:04:d6:9c:85:3b:60:db:18:17:e6:
e3:23:7b:4f:a6:ed:af:e1:29:48:7a:fb:c6:7c:5b:
2e:09:ce:b4:33:39:8f:fa:b7:c0:7b:52:88:26:17:
ee:ff:d6:37:24:6e:c4:d7:5c:76:0f:41:88:de:1c:
7e:47:18:e9:51:c4:5e:c6:56:8b:75:5f:27:6f:d4:
7f:66:7b:fb:0e:ae:c3:ab:05:15:bd:db:80:fb:c1:
9f:4b:0e:b1:3e:76:91:3d:52:99:d3:52:12:59:fe:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:A8:14:B8:30:3B:DE:14:3A:F0:B2:71:29:58:41:7B:E3:5A:1A
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.204.0/23
Signature Algorithm: sha256WithRSAEncryption
31:72:eb:23:9e:67:88:e2:ad:90:c0:aa:9c:c4:d7:15:20:ce:
1a:da:d2:06:89:c7:98:83:48:c8:57:bc:30:f6:57:30:81:3e:
23:7f:b7:91:6f:e6:69:a2:96:4f:3e:21:7e:b2:14:e7:a1:07:
74:a1:4e:04:0a:0a:67:cb:57:75:c9:d1:c9:1b:25:86:7c:17:
47:bb:70:43:df:9f:08:28:6c:d2:7f:50:33:19:fc:a7:4f:b5:
ae:c1:52:71:1a:b2:c9:4a:03:ab:dd:88:9e:5d:e2:d9:75:42:
53:8b:27:0a:81:24:e6:42:a3:26:7a:4b:66:7f:56:70:98:d7:
21:5a:b3:6b:fe:59:1a:16:de:ac:a5:80:bc:e7:69:db:b3:64:
e9:7b:ff:05:12:b8:5f:7c:04:17:f7:00:22:d4:58:9a:e5:0d:
ca:87:3a:0b:34:ee:18:67:aa:02:91:83:fd:a3:78:8b:e0:3c:
05:74:73:94:82:28:3c:ce:d8:13:72:89:90:12:3f:6e:7b:7c:
98:ab:9b:da:c5:43:5b:e7:6c:85:f0:15:d3:84:86:60:bb:b2:
d4:37:8e:86:46:8c:7e:a2:3b:1d:ba:b9:6a:c7:3e:1b:5a:9e:
0b:4d:e2:0a:30:e0:f1:19:4d:ee:ca:7b:73:6e:ad:c4:9f:91:
cd:f9:c1:8c
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUTaBQ8X1Kp+o9W21AvHYp3WfjIVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yNjAyMTkwMjU1MDJaFw0yNzAyMTgwMzAwMDJaMDMxMTAvBgNV
BAMTKDAwREJBODE0QjgzMDNCREUxNDNBRjBCMjcxMjk1ODQxN0JFMzVBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLfUSYJ/bT+aISfTGNGOr69rM
wnRC0L/qYRHbjZR5Sx/5xOt1vMPNEb5/32SH7Ty4dlF3aO0ZkEsKchOFZ78r8qjI
umxiidnL7IfusbT0tGowYx85Gjew1Tshkk7or9s+/cziP0LtkoAsVPqlQ84v5gFz
OPUVFRIjRaBZvPNCjGAdcPTKiO5l5yjIMWRp2DZxT8Fts4kEONNTBNachTtg2xgX
5uMje0+m7a/hKUh6+8Z8Wy4JzrQzOY/6t8B7UogmF+7/1jckbsTXXHYPQYjeHH5H
GOlRxF7GVot1Xydv1H9me/sOrsOrBRW924D7wZ9LDrE+dpE9UpnTUhJZ/lQPAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUANuoFLgwO94UOvCycSlYQXvjWhowHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl
cG8tcnBraS5pZG5pYy5uZXQvcmVwby8yZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0y
NTQzODEwNjllNTcvMC9BUzQ1NzAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdwvMMA0GCSqGSIb3DQEB
CwUAA4IBAQAxcusjnmeI4q2QwKqcxNcVIM4a2tIGiceYg0jIV7ww9lcwgT4jf7eR
b+ZpopZPPiF+shTnoQd0oU4ECgpny1d1ydHJGyWGfBdHu3BD358IKGzSf1AzGfyn
T7WuwVJxGrLJSgOr3YieXeLZdUJTiycKgSTmQqMmektmf1ZwmNchWrNr/lkaFt6s
pYC852nbs2Tpe/8FErhffAQX9wAi1Fia5Q3KhzoLNO4YZ6oCkYP9o3iL4DwFdHOU
gig8ztgTcomQEj9ue3yYq5vaxUNb52yF8BXThIZgu7LUN46GRox+ojsdurlqxz4b
Wp4LTeIKMODxGU3uyntzbq3En5HN+cGM
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:22 2026 by rpki-client